San Francisco, United States

IT Security and Governance

Certified Information Security Manager (CISM)in San Francisco

40 Hours / 5 DaysLive virtual trainingAdvanced

Classroom training and venue arrangements depend on the availability of a suitable conference hall in San Francisco, United States. Dates, seating capacity, facilities and the final venue are confirmed before booking.

Learning in San Francisco, United States

City details

San Francisco is known for diverse industries, professional networks and internationally connected business communities.

City speciality

Industry, innovation and professional networks

Classroom availability and venue

Build your understanding

Explore Certified Information Security Manager (CISM)

CISM Certification Training in San Francisco, United States helps professionals build expertise in information security governance, risk management, security programs, and incident management. This CISM Course from StepMerit Learning provides structured, exam-focused learning for professionals seeking advanced cybersecurity management skills, stronger security leadership capabilities, and preparation for the Certified Information Security Manager certification from ISACA.

View the complete course information

Your learning location

Learning from San Francisco

San Francisco is known for diverse industries, professional networks and internationally connected business communities.

Make your learning count

City-page course benefits

Build Information Security Governance Expertise
Develop knowledge of information security governance, organizational structures, policies, strategy, and regulatory requirements through CISM Training in San Francisco, United States.
Strengthen Information Security Risk Management Skills
Learn to identify, assess, analyze, monitor, and respond to information security risks while aligning security decisions with organizational objectives in San Francisco, United States.
Develop Information Security Program Management Knowledge
Gain structured knowledge of security program development, security controls, policies, resources, metrics, awareness, and program management through CISM Certification Training in San Francisco, United States.
Enhance Incident Management Capabilities
Understand incident response planning, investigation, containment, eradication, recovery, communication, and post-incident reviews through CISM Training in San Francisco, United States.
Prepare for CISM Certification
Build exam-oriented knowledge across the four CISM domains with structured learning, practice activities, and certification preparation through StepMerit Learning in San Francisco, United States.
Develop Security Management and Leadership Knowledge
Strengthen your understanding of enterprise security strategy, governance, risk, security programs, and incident management to support information security management responsibilities in San Francisco, United States.
Improve Enterprise Cybersecurity Decision-Making
Learn how governance, risk management, security programs, and incident management contribute to effective enterprise information security decisions through CISM training in San Francisco, United States.
Support Long-Term Cybersecurity Career Development
Build management-focused information security knowledge that can support continued professional development in governance, risk management, security programs, and incident management in San Francisco, United States.

Course curriculum

Module 1: Information Security Governance
- Enterprise governance, organizational culture, and security responsibilities
- Legal, regulatory, and contractual requirements
- Organizational structures, roles, responsibilities, and accountability
- Information security governance frameworks and standards
- Information security strategy development and alignment with business objectives
- Strategic planning, budgeting, resources, and business cases
- Enterprise architecture and its relationship to information security
- Stakeholder communication, leadership support, and security metrics
Module 2: Information Security Risk Management
- Emerging cybersecurity risks and evolving threat landscapes
- Vulnerability and security control deficiency analysis
- Information security risk identification and assessment
- Risk analysis and evaluation based on organizational risk appetite
- Risk treatment and response options
- Risk ownership and control ownership
- Risk monitoring, reporting, and communication
- Integration of information security risk management with business processes
Module 3: Information Security Program
- Information security program development and strategic alignment
- Security program resources including people, processes, tools, and technologies
- Information asset identification and classification
- Information security frameworks, standards, policies, and procedures
- Information security program metrics and performance measurement
- Security control design, selection, implementation, and integration
- Security control testing and effectiveness evaluation
- Security awareness, training, and organizational communication
- Third-party, supplier, and external service management
- Information security architecture and security requirements
- Security program reporting and continuous improvement
Module 4: Incident Management
- Information security incident response planning
- Business Impact Analysis (BIA)
- Business Continuity Planning (BCP)
- Disaster Recovery Planning (DRP)
- Incident classification and categorization
- Incident response training, testing, and evaluation
- Incident investigation and analysis
- Incident containment, eradication, and recovery
- Incident communication, notification, escalation, and reporting
- Post-incident reviews, root-cause analysis, and lessons learned
- Continuous improvement of incident management capabilities
Module 5: CISM Strategy and Management Scenarios
- Business-aligned information security strategy scenarios
- Enterprise risk assessment and risk treatment scenarios
- Security governance and stakeholder decision-making
- Security program development and resource management
- Security architecture and enterprise technology considerations
- Third-party and supply-chain security scenarios
- Incident response and recovery decision-making
- Management-oriented cybersecurity case studies
Module 6: CISM Exam Preparation and Practice
- Comprehensive revision of all four CISM domains
- Scenario-based information security management questions
- Governance and security strategy practice
- Risk management and risk response practice
- Security program management assessments
- Incident management and response scenarios
- Mock tests and performance evaluation
- Exam question analysis and time-management strategies
- Identification of knowledge gaps and targeted revision
- Final CISM certification examination preparation

Exam details

Certification: Certified Information Security Manager (CISM)
Certification Body: ISACA
Exam Format: Computer-based examination
Number of Questions: 150 questions
Exam Duration: 4 hours (240 minutes)
Question Type: Multiple-choice questions
Passing Score: 450 on a scaled score range of 200–800
Exam Delivery: Authorized PSI testing centers or remotely proctored examination
CISM Certification Experience Requirement

Passing the CISM examination alone does not automatically grant the CISM certification. ISACA requires at least five years of professional information security management experience across at least three of the four CISM domains for certification.

Plan your learning

Who this course is for

Information Security Managers – Suitable for information security managers seeking to strengthen security governance, risk management, security program management, and incident management skills in San Francisco, United States. Cybersecurity Managers and Leaders – Designed for cybersecurity managers and security leaders who want to develop management-focused knowledge for aligning cybersecurity strategies with organizational objectives in San Francisco, United States. Information Security Governance Professionals – Ideal for professionals responsible for information security governance, policies, organizational responsibilities, compliance requirements, and security strategy in San…

Before you begin

Professional Information Security Experience CISM certification requires a minimum of 5 years of professional information security management work experience across the CISM job practice areas. The experience requirement applies to certification, although it is not required simply to sit for the CISM exam. Information Security Management Knowledge Basic to intermediate knowledge of information security governance, risk management, security programs, and incident management is recommended for learners joining CISM Certification Training in San Francisco, United States. IT and Cybersecurity Background A background in IT, cybersecurity, information security, risk management, compliance, or…

Learning outcomes

Problem Statement Healthcare organizations manage sensitive patient, clinical, and financial information that requires strong security governance and risk management. How We Overcame the Problem Learners applied CISM principles to establish security governance, manage risks, develop security programs, and handle incidents. Overall Implementation Learners implemented healthcare security processes covering governance, risk assessment, security programs, controls, incident management, and reporting. Evidence of Learning Learners demonstrated skills in identifying security risks, developing policies, selecting controls, managing programs, and responding to incidents. Healthcare Security Workflow…

Prefer a course discussion? Schedule a meeting

Room facilities / classroom arrangements

General planning information. Availability is confirmed for your selected venue and batch.

Typical classroom arrangements — subject to confirmation for the selected batch: 1. Learning space and seating: A suitable room layout with seating and desk space for course discussions and exercises. 2. Presentation equipment: A display or projector for instructor-led explanations; equipment requirements are confirmed before delivery. 3. Internet and power: Connectivity and charging access where needed for the course’s digital resources or labs. 4. Collaboration tools: A whiteboard or flip chart for group activities, demonstrations and note-taking. 5. Room comfort: Appropriate lighting and ventilation, with breaks included in the agreed training schedule. 6. Access and learner needs: Accessibility, refreshments and any specific accommodation requirements should be discussed with the adviser in advance. This is general planning information. It does not confirm a particular venue, equipment package or included refreshments.

Course expertise

10+ Years of Information Security & Management Experience 2,500+ Hours of Professional Training Delivered 1,500+ Professionals Trained 150+ Corporate & Professional Training Sessions 100+ Practical Security Management Case Studies 750+ Hours of CISM & Information Security Management Training 250+ Governance, Risk & Incident Management Exercises 10+ Industry Sectors Covered Through Training

Continue exploring

Insights for Certified Information Security Manager (CISM)

Learning insight 01

CISM (Certified Information Security Manager): Complete Guide to Certification, Exam & Career

The CISM (Certified Information Security Manager) certification from ISACA is designed for professionals who manage, develop, and oversee enterprise information security programs. The certification focuses on information security governance, risk management, information security programs, and incident management.

Read the full article

Learning insight 02

CISSP (Certified Information Systems Security Professional): Complete Guide to Certification, Exam & Career

The CISSP (Certified Information Systems Security Professional) is a globally recognized information security certification offered by ISC2 . It is designed for experienced cybersecurity professionals who want to demonstrate knowledge across technical and managerial aspects of information security. CISSP covers a broad…

Read the full article

Learning insight 03

CISSP-ISSAP Certification: Complete Guide to Information Systems Security Architecture, Exam, and Career Opportunities

Modern organisations rely on complex IT infrastructures, cloud platforms, enterprise applications, and interconnected networks to manage critical business operations. As cyber threats become more sophisticated, organisations need security professionals who can design resilient security architectures, manage enterprise…

Read the full article

Explore this course locally

New York Chicago Los Angeles Boston